joshua-cogliati-inl commented on issue #70251:
URL: https://github.com/apache/airflow/issues/70251#issuecomment-5052442447
Combined suggested patch:
```diff
diff --git
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/
commands.py
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli
/commands.py
index 705fc4eb0b..b17cdc44c8 100644
---
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/command
s.py
+++
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/command
s.py
@@ -792,6 +792,7 @@ def _attach_team_permissions(
policy_name=_team_role_policy_name(team, "Viewer"),
scope_names=["GET", "LIST"],
resource_names=team_readable_resources,
+ decision_strategy="AFFIRMATIVE",
_dry_run=_dry_run,
)
for role_name in ("User", "Op", "Admin"):
@@ -802,6 +803,7 @@ def _attach_team_permissions(
policy_name=_team_role_policy_name(team, role_name),
scope_names=["GET", "LIST"],
resource_names=team_readable_resources,
+ decision_strategy="AFFIRMATIVE",
_dry_run=_dry_run,
)
_attach_policy_to_scope_permission(
@@ -830,6 +832,7 @@ def _attach_team_permissions(
f"{KeycloakResource.CONNECTION.value}:{team}",
f"{KeycloakResource.POOL.value}:{team}",
f"{KeycloakResource.VARIABLE.value}:{team}",
+ f"{KeycloakResource.DAG.value}:{team}",
],
_dry_run=_dry_run,
)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
